Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AB6F63E675B511EBB9CB8728F8AEA228.roa
File: AB6F63E675B511EBB9CB8728F8AEA228.roa (raw, json)
Hash identifier: LKkayfoU7b767Rl5NR+Zvhjo3pNsYs29BjRucoo4Ho0=
Subject key identifier: 12:27:1F:E7:3C:81:02:FF:FF:21:5D:34:2E:60:B4:84:2B:45:26:50
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 04DF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AB6F63E675B511EBB9CB8728F8AEA228.roa
Signing time: Tue 23 Feb 2021 09:01:10 +0000
ROA not before: Tue 23 Feb 2021 09:01:02 +0000
ROA not after: Mon 23 May 2022 09:01:02 +0000
asID: 141374
IP address blocks: 156.240.100.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1247 (0x4df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 23 09:01:02 2021 GMT
Not After : May 23 09:01:02 2022 GMT
Subject: CN=6034c455-5d68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:bb:45:31:7a:5b:9f:7f:91:b7:f8:f7:3e:57:
08:e7:ae:de:bf:27:5c:24:45:67:1e:d1:ed:fd:15:
ed:1b:55:e3:b4:78:41:e6:c3:59:d8:b7:09:e9:1f:
34:03:b0:f0:7d:54:36:9d:3c:93:54:33:d6:88:0a:
b8:35:dc:41:24:fb:cc:c5:d7:33:f2:de:aa:ab:32:
fa:b5:aa:d6:a3:39:f5:df:9f:73:38:c3:2d:fd:92:
c6:67:a2:24:3b:c8:0c:38:7e:87:e6:d2:78:c1:9a:
68:e7:36:c3:b5:f6:7d:19:b0:76:4f:0b:df:80:a3:
30:c1:05:e0:a9:f0:8a:7e:a1:ce:f1:5b:7f:29:1b:
69:7f:05:d9:c8:e1:40:24:14:9d:64:28:78:5e:8b:
0e:5f:d4:f9:09:14:79:b9:d6:f2:c2:f7:99:25:d6:
84:4f:24:8f:18:37:79:62:fc:36:c3:4b:87:ed:82:
41:19:4f:75:c8:21:b8:f9:44:62:d0:82:4b:2e:56:
1a:9c:63:80:1d:5d:63:17:a4:f8:73:1c:c9:43:da:
92:57:40:16:98:64:d0:66:be:25:e5:f9:90:5d:2d:
39:83:b3:c4:f3:3d:e4:aa:2e:17:ff:85:01:ce:82:
0e:34:58:59:eb:2e:f5:ca:69:a6:54:65:50:b3:4b:
1c:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:27:1F:E7:3C:81:02:FF:FF:21:5D:34:2E:60:B4:84:2B:45:26:50
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AB6F63E675B511EBB9CB8728F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.240.100.0/22
Signature Algorithm: sha256WithRSAEncryption
1f:f8:b3:c7:c6:78:dc:00:6d:90:0b:7f:04:1b:69:6c:b1:c0:
0c:d7:25:7d:73:a3:24:f5:a7:d5:15:6d:6e:05:f9:b6:9c:81:
31:e8:03:f3:0b:6e:c7:64:16:8f:e6:58:6f:73:12:e5:f6:99:
07:ad:3b:c0:b2:10:e2:6f:62:5a:ae:e7:91:ba:6b:e1:29:06:
65:0f:91:1e:0d:79:c8:f3:15:2a:0e:43:d5:b2:53:b1:25:72:
b9:4b:c3:70:79:3d:9b:20:c3:31:1d:fd:8c:83:c3:48:3d:8d:
ea:c3:f3:fc:fd:71:73:13:6e:92:13:17:87:1d:af:f9:00:fe:
df:fd:91:8c:ef:08:c9:b4:70:6d:1a:d5:69:ee:ed:78:f5:14:
a6:2f:96:17:20:3b:ca:59:4e:50:07:27:52:c4:3e:07:40:98:
d3:38:b6:7a:fd:3d:c1:e1:a1:d1:92:ed:ea:d8:bb:cd:bb:27:
09:7d:03:56:15:99:5e:81:bc:fd:e0:9c:ae:47:b8:ea:b6:c7:
22:59:f1:0e:70:f2:f1:63:aa:89:2b:2e:fd:bc:a9:51:d2:d5:
2a:50:e9:2f:c3:00:7f:42:88:4d:f6:7e:c4:55:00:da:26:ad:
c3:08:aa:c3:6d:02:70:51:8e:6d:6f:ba:af:8e:3c:8a:e6:df:
b4:cb:fc:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:25 2023 by rpki-client on console-fra.rpki-client.org